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INTERNATIONAL PRELIMINARY REPORT ON PATENTABILITY 



International application No. 
PCT/CA2004/002012 



Box No. I Basis of the report 



, which is the language of a 



1 1 . With regard to the language, this report is based on: 

[X] the international application in the language in which it was filed 
[ ] a translation of the international application into 
translation furnished for the purposes of: 
[ ] international search (Rules 1 2.3(a) and 23. 1 (b)) 
[ ] publication of the international application (Rule 12.4(a)) 
[ ] international preliminary examination (Rules 55.2(a) and/or 55.3(a)) 

] E^SSl* °n%* eI . ements of *» international application, this report is based on (replacement sheets which have been famished to 
^^ri^o^^ t0 m mVitati0n Und€r AHiCle 14 are 10 in « "originally filed" Stf * 

[ ] the international application as originally filed/furnished 



[X] 


the description: 






[X] pages 


1-10 




[ ] pages* 






[ ] pages* 




[X] 


the claims: 






[X] pages 


11 




[ ] pages* 






[X] pages* 


12-13 




[ ] pages* 




[X] 


the drawings: 






[X] pages 


1-3 




[ ] pages* 






[ ] pages* 





received by this Authority on 
received by this Authority on 



as originally filed/furnished 



as amended (togeth« 
received by this Authority on 
received by this Authority on 



as originally filed/furnished 
r with any statement) under Article 1 9 

22 September 2005 (22-09-2005^ 



as originally filed/furnished 



received by this Authority on 
received by this Authority on 
[ ] a sequence listing and/or any related table(s)- see Supplemental Box Relating to Sequence Listing. 

i 

J 3. [ ] The amendments have resulted in the cancellation of: 
[ ] the description, pages 
[ ] the claims, Nos. 
[ ] the drawings, sheets/figs 
[ ] the sequence listing (specify): 
[ ] any table(s) related to sequence listing (specify): 

4. [ ] This report has been established as if (some of) the amendments annexed to mis report and listed below had not been made^ 
since they have been considered to go beyond the disclosure as filed, as indicated in the Supplemental Box (Rule 70.2(c)). 
[ ] the description, pages » 
[ ] the claims, Nos. 
[ ] the drawings, sheets/figs 
[ ] the sequence listing (specify): 
[ ] any table(s) related to sequence listing (specify): 



If item 4 applies, some or all of those sheets may be marked "superseded. " 
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Box No. V ^SS^T^ «nder Article 35(2) with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 

1. Statement — ~~ — 



Novelty (N) 


Claims 


his. 


YES 




Claims 


None 


NO 


Inventive step (IS) 


Claims 


1-19 


YES 




Claims 


None 


NO 


Industrial applicability (IA) 


Claims 


LJ9 


YES 




Claims 


None 


NO 



2. Citations and explanations (Rule 70.7) 
1 .0 Reference is made to the following documents: 

Dl US5,796,942 ; 

?nni t£™ t* a1, "P, 8 ?* Sniffing for Automated Chat Room Monitoring and Evidence Preservation" Proceedings of the 
zuui lccc, worKsftop on Information Assurance and Se.ri.nK/ United States Militorv Ar»H^mu p^„* 



1.1 

1.2 



1.3 

2.0 

2.1 
2.1 

3.0 
4.0 



:e 

server 



2001, pages 285-288. "" J Security ' United States Military Academy, West Point, NY, 5-6 June 

Dl and D2 are considered to form the closest prior art. 

Dl discloses a network surveillance system including means for capturing network packets, filtering invalid packets storms the 
J££rf32f according to session identification, reeonstacting sessions, and 2S>2 ST* 

Novelty 

Although Dlteaches reconstructing sessions from stored packets in memory, such reconstructed packets are identical to their 
SSSC??" ''^^y. .^ereas in claims 1, 17, arid 19are^nstaSorbuildsparanelpactete ^to whicSTandom^ 
mformation us copied from original packets, but initial sequence numbers and acknowledgement numbersfor ftetetter 
reconstructed parallel packets are new. Thus, any pre-existing standard service provider nWbeusedSme^Lslon re- 
constructor whereas, ,n Dl, a special device must be built to handle the reconstructed (duB^aS 

D2 teaches interception of network packets transmitted across a network, but fails to disclose the creation of aparallel session. 

Thus, Dl or D2 fail to disclose all the elements of each of claims 1, 17, and 1 9, and their dependent claims 2-16 and 1 8 
respechvely. Churns 1-19 are therefore considered to be novel in accordance wim Se 33(2) PCr ' 

Inventive Step 

m , ^ comb i natio1 ? with D2, fails to teach reconstruction of parallel packets including new initial seouence numbers 
and acknowledgement numbers. Thus, independent claims 1, 17, and 19, and I foeirdependent cfatasTl 6 and lS^SSv 
are considered to have inventive step in accordance with Article 33(3) PCT. P ^ 10 and 1 8, respectively, 

Industrial Applicability 

33(4?^? ***** matter ° f ClaimS 1-18 is COnsidered to be tadnstriaUV applicable, thus fulfilling the requirements of Article 
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Box No. Vm Certain observations on the international application 



sTpp^ ° f *° daimS ' descri ^ ™ d drawin S? °* on the question whether the claims are fully 

The present set of claims does not meet the requirements of Article 6 PCT since it is not clear and concise in the following respects: 

Claim 1 is directed towards desired results because claim 1 claims a method but fails to specify more than one method step. A 
method must have at least two steps. K 

In claim 5, the expression "follows internet protocol" is ambiguous. 

In cjaim 6, the expression "follows transport control protocol" is ambiguous. ' 

In claim 17, the term "interface" (line 3) lacks a clear and unambiguous antecedent because the term is already declared on line 2. 

The use of the term "sequence number" on lines 3 and 4 of claim 18 is ambiguous. A "sequence number" normally refers to 
identification of a session packet and cannot be applied to a network endpoint. 

In claim 1 8, the term "point" (line 4) appears to be in error. Applicant may have intended "endpoint" instead. 



Hie following comments are noted regarding the description: 

The description does not comply with PCT Article 5. A statement in an application, such as found on page 8, lines 16-17 and 19 

& sSSTF ™Z other docniment, does not fully describe the invention. Hie description shall be complete in and 
on itself. A person skilled in the art should be able to understand the patent specification without reference to any other document 
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